CVE-2026-101982

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP/EVPN peer to cause root code execution on Junos OS or an rpd crash on Junos OS Evolved via protocol-valid route advertisements for an EVPN-VPWS service.

Score

CVSS 3.1 9.8 Critical

Status

Awaiting Analysis - sirt@juniper.net

Published

2026-10-14

Last modified

2026-10-16

Weaknesses

CWE-121

Affected products

• Junos Os (Juniper Networks)
• Junos Os Evolved (Juniper Networks)

References

• https://supportportal.juniper.net/JSA112187